[SOLVED] I can't receive mail!

[masterguido]

I have installed ubuntu 8 server and zimbra in a LAN with another server (opensuse11) with a static IP.
I can send mail from zimbra to everybody but the only way I can receive mail is from another account in zimbra.
my public IP is 200.40.171.98
zimbra server is on 192.168.1.7
I have made changes to my iptables script, as follows:

ANYNET=0.0.0.0/0
iptables -A INPUT -i $ANYNET -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -i $ANYNET -p tcp --dport 110 -j ACCEPT
iptables -t nat -A PREROUTING --dst 200.40.171.98 -p tcp --dport 25 -j DNAT --to 192.168.1.7

of course there are a lot more things in this script but, except in default policies, there aren't any DROP rules.

Please help.
Thanks in advance

[phoenix]

I assume you've also checked that the option to 'Enable DNS lookups' is set in the MTA tab of the Admin UI? Although judging by this report it's a problem with your firewall. Have you also made sure that the firewall and AppArmor is disabled on your Zimbra server?

[masterguido]

I assume you've also checked that the option to 'Enable DNS lookups' is set in the MTA tab of the Admin UI? Although judging by this report it's a problem with your firewall. Have you also made sure that the firewall and AppArmor is disabled on your Zimbra server?

The 'Enable DNS lookups' was set.
I have no firewall on Zimbra Server, but when I type

/etc/init.d/apparmor stop

ubuntu answers:

Unloading AppArmor profiles: Done

But still no incoming mail.

[phoenix]

From another machine on your LAN try a telnet to the zimbra server on port 25, does it work? Are all the zimbra services up and running? What does the output of the following show:

zmcontrol status

According to the report I gave you earlier there's a 'connection refused' which usually means that a port is blocked or a service isn't running. Please check that the firewall is really disabled on the Zimbra server and that AppArmor is also disabled and stopped from starting at boot time. Does your ISP actually block port 25 or are you allowed to run a mail server on your IP address?

[masterguido]

From another machine on your LAN try a telnet to the zimbra server on port 25

Work.

220 correo.sanjuan.edu.uy ESMTP Postfix

zmcontrol status

antispam...Running
antivirus...Running
imapproxy...Running
ldap...Running
logger...Running
mailbox...Running
mta...Running
snmp...Running
spell...Running
stats...Running

No firewall (on zimbra box) neither AppArmor. I don´t think my ISP blocks port 25

If I try to telnet port 25 from outside the lan, i get an error (conexion refused)

[phoenix]

Originally Posted by masterguido

Work.

220 correo.sanjuan.edu.uy ESMTP Postfix

antispam...Running
antivirus...Running
imapproxy...Running
ldap...Running
logger...Running
mailbox...Running
mta...Running
snmp...Running
spell...Running
stats...Running

No firewall (on zimbra box) neither AppArmor. I don´t think my ISP blocks port 25

OK, so that indicates that you have no problem with your Zimbra server and that there's no firewall on the server causing problems.

Originally Posted by masterguido

If I try to telnet port 25 from outside the lan, i get an error (conexion refused)

That would indicate that your firewall is blocking access to your Zimbra server or the port is not forwarded to the correct LAN IP or that your ISP is blocking port 25 - one of those is likely to be the problem.

[phoenix]

You should also have a look at the link I gave you earlier for the wiki Firewall article, that was a working set-up and see if it matches your firewall rules.

[masterguido]

Now it's working!!!
I have an error on my iptables file.

Just one final question (I hope):
when, from outside my lan, I try to access my mail server:

http://correo.sanjuan.edu.uy

I get the main site page, without mail access.

[phoenix]

You've obviously got a web server sitting on the same IP address as your Zimbra server, using http for Zimbra will get you to your web server (as they're both using port 80). You also shouldn't use http for your Zimbra server if it's on the internet as it's not very secure, I'd suggest you change Zimbra to use https by using this command and forward port 443 to the LAN IP of your Zimbra server - your users will now be able to get to their mail by entering https://correo.sanjuan.edu.uy in their browser.

[masterguido]

Thank you very much!!
That was all that I needed. Now zimbra is working perfectly.

Thanks again Phoenix